[Hiring] Corporate Counsel III (Privacy, Digital Risk, and Cybersecurity) @Premier Inc.

Role Description

Working as part of Premier's Privacy Office, the Corporate Counsel III (Privacy, Digital Risk, and Cybersecurity) advises Premier on compliance with applicable privacy, cybersecurity, and digital laws, regulations, and industry frameworks, including U.S. state privacy laws, HIPAA and HITECH, PCI DSS, and NIST.

This position will serve as the team’s principal legal specialist for cybersecurity regulatory compliance, while partnering with the Corporate Counsel III (Privacy, Digital & AI) on privacy compliance and digital risk oversight. The attorney will provide practical, risk-based guidance to Premier’s business teams, AI & Data Analytics organization, and Legal team.

This role will partner cross-functionally to continuously improve, operationalize, and evolve Premier’s privacy, cybersecurity, and digital governance programs. The attorney will work closely with the Security and Technology teams to translate applicable regulatory requirements into practical, scalable processes and controls supporting supplier privacy and vendor cybersecurity assessments, privacy impact assessments, privacy-related cybersecurity audit requirements, online privacy and digital compliance, and specialized privacy and cybersecurity contract negotiations. The attorney will also monitor evolving privacy, cybersecurity, and digital legal requirements and advise relevant stakeholders on their impact.

The ideal candidate is a highly proactive, business-minded attorney who enjoys building and evolving governance programs and processes, works well independently and collaboratively, and provides clear, decisive recommendations. The candidate should thrive in a fast-paced, complex environment and collaborate effectively with senior management, IT and cybersecurity teams, business teams, vendors, customers, and outside counsel.

Qualifications

• Years of Applicable Experience: 7 or more years
• Education: Juris Doctorate (Required)
• Required Certifications/Licensing: Active license in good standing to practice law in at least one U.S. jurisdiction, with eligibility to serve as in-house counsel as required.

Requirements

• One or more relevant privacy or AI governance certifications, such as CIPP/US, CIPP/E, CIPM, CIPT.
• Experience operationalizing privacy, AI, and digital risk programs and related processes.
• Familiarity with OneTrust, Transcend, or similar privacy or AI governance platforms.
• At least 5 years of relevant legal experience, preferably 5 to 7 or more years, advising on privacy, cybersecurity, digital compliance, technology, or related regulatory matters in a law firm, in-house legal department, government agency, or comparable environment.
• Substantive knowledge of U.S. privacy and data protection laws, including HIPAA and HITECH, state comprehensive privacy laws, state consumer health data laws, data breach notification laws, and other requirements governing the collection, use, disclosure, retention, and protection of personal information.
• Demonstrated experience interpreting cybersecurity laws, regulations, and recognized cybersecurity frameworks, including the ability to identify legal, regulatory, and compliance requirements arising under authorities and frameworks such as FISMA, NIST, and PCI DSS and translate those requirements into practical guidance for Cybersecurity, IT, compliance, and business teams.
• Hands-on experience conducting or providing legal oversight for privacy and digital risk assessments, including privacy impact assessments, records of processing activities, data subject request workflows, supplier privacy reviews, vendor cybersecurity assessments, and assessments of new products, technologies, data uses, or business initiatives.
• Experience advising on digital compliance matters, including website and application privacy disclosures, online tracking technologies, cookies and consent requirements, digital terms and conditions, consumer-facing data practices, and accessibility-related legal requirements.
• Experience supporting privacy and cybersecurity incident response, including conducting legal assessments, coordinating investigation and mitigation activities, determining contractual and regulatory notification obligations, preparing, or reviewing notifications, and working with affected business partners, customers, regulators, forensic providers, notification vendors, and outside counsel.
• Experience drafting, reviewing, and negotiating privacy, cybersecurity, and data protection provisions in commercial agreements, including data processing agreements, business associate agreements, cybersecurity addenda, incident notification provisions, international data transfer terms, and privacy and cybersecurity requirements in customer and supplier contracts.
• Experience advising business, product, technology, data, and cybersecurity stakeholders during the design or implementation of new products, services, systems, vendors, and data uses, with the ability to identify applicable requirements early and recommend practical controls or risk mitigations.
• Experience developing, implementing, or materially improving privacy, cybersecurity, or digital governance programs, including policies, standards, procedures, assessment methodologies, templates, decision records, escalation protocols, training materials, and compliance workflows.

Benefits

• Health, dental, vision, life and disability insurance
• 401k retirement program
• Paid time off
• Participation in Premier’s employee incentive plans
• Tuition reimbursement and professional development opportunities